PowerShell One-Liners

Nice one-liner PowerShell cmd to see what firewall rules are set for outbound comms.

Get-NetFirewallPortFilter|where remoteport -ine 'Any'|group remoteport,protocol|select @{n='Port';e={if( $p = $_.group[0].RemotePort -as [int]) { $p } else { $_.group[0].RemotePort}}},@{n='Protocol';e={$_.group[0].Protocol}},@{n='Rule';e={$_.group.InstanceID -join ' / '}}|sort port

Cross references to the firewall rule(s) and only outputs if 1 of those rules is enabled. Also outputs firewall rule display name which is hopefully more meaningful than the name.

Get-NetFirewallPortFilter|where remoteport -ine 'Any'|group remoteport,protocol|select @{n='Port';e={if( $p = $_.group[0].RemotePort -as [int]) { $p } else { $_.group[0].RemotePort}}},@{n='Protocol';e={$_.group[0].Protocol}},@{n='Enabled';e={ $script:rules = Get-NetFirewallRule -Name $_.group.InstanceID -EA 0 ; ($script:rules | Select -Expand Enabled -Unique) -match 'True' }},@{n='Rules';e={($script:rules|Select -expand DisplayName) -join ' / '}}|Where Enabled|sort port

Granualr detail of processes and their signatures

ps -name smartscreen|gp|Get-AuthenticodeSignature|fl *